CVE-2025-48921

HIGH

Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-48921 has a selected CVSS score of 8.8 (high).

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 26, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Open Social

Browse Drupal / Open Social

Default status: unaffected

CVE List0.0.0 to < 12.3.14affected
12.4.0 to < 12.4.13affected

References

2